General

  • Target

    738ce6185c72419eddc85cde2c433380_NeikiAnalytics.exe

  • Size

    172KB

  • MD5

    738ce6185c72419eddc85cde2c433380

  • SHA1

    95123e6710b22bc2f724ce21bf40c78d041757ff

  • SHA256

    36d458dbe3d978e372af9fa7edf346834cc8790825943d5b2ed44cff7715b049

  • SHA512

    1e5d04b92e15e03a72c4da7d395f4f57a9dc6b517c400f4e1987930f76632d805d02526b4a149c85c46f8ab2eb9c93f0620f86ff1cf17b9039da86658e593eb6

  • SSDEEP

    3072:4UUEa9Te3JQBf8td3/oxN1ULH0tyr8e8h4:b7QRyi1tyr

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

mucha

C2

83.97.73.131:19071

Attributes
  • auth_value

    5d76e123341992ecf110010eb89456f0

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 738ce6185c72419eddc85cde2c433380_NeikiAnalytics.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections